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1 . O This communication is responsive to 2/17/05 . 

2. S The allowed claim(s) is/are U6.8-14and 16-22. 24 . 

3. (3 The drawings filed on 27 August 2001 are accepted by the Examiner. 
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International Bureau (PCT Rule 17.2(a)). 
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SUPPLEMENTAL EXAMINER'S AMENDMENT 



1 . This is a supplemental Examiner's Amendment to correct the deficiencies of the 
Examiner's Amendment of 5/10/2005 

2. Claims 1-24 are pending. Claims 7, 15, 23 have been canceled. 

An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1 .3 1 2. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Francis Lammes on April 25 th . 

1 . (Currently amended) A method in a data processing system, said method 
comprising the steps of: 

receiving a request from a client for a secure Web page at a server, said secure 
Web page including static data; 

establishing a secure session between said client and said server in response to 
said client transmitting said request; 

associating a cache with said secure session; 

determining whether a pre-encrypted version of said static data has been stored in 
said cache in response to said receipt of said request; and 
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in response to a determination that said pre-encrypted version of said static data 
has been stored in said cache, transmitting said pre-encrypted version of said static data; 

receiving a request for static data included within said Web page; 

checking the cache to determine whether the pre-encrypted version of said static 
data is already stored in said cache; 

in response to a determination that said pre-encrypted version is stored in said 
cache, bypassing the encryption step and transmitting said pre-encrypted version of the static 
data; and 

in response to a determination that said pre-encrypted version is not stored in said 
cache, encrypting said static data and transmitting said encrypted static data. 

2. (Currently amended) The method according to claim 1, further comprising the 
step of in response to a determination that said static data has not been pre-encrypted, encrypting 
said static data and transmitting said encrypted static data. 

3. (Currently amended) The method according to claim 2, further comprising the 
step of in response to a determination that said static data has not been pre-encrypted, storing 
said encrypted static data. 

4. (Currently amended) The method according to claim 3, further comprising the 
step of storing said encrypted static data in the cache. 
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5. (Currently amended) The method according to claim 1 , further comprising the 
steps of: 

receiving a request for an image included within said Web page; 

checking the cache to determine whether the pre-encrypted version of said image 
is already stored in said cache; 

in response to a determination that said pre-encrypted version of said image is 
stored in said cache, bypassing the encryption step and transmitting said pre-encrypted version of 
the image; and 

in response to a determination that said pre-encrypted version of said image is not 
stored in said cache, encrypting said image and transmitting said encrypted image. 

6. (Currently amended) The method according to claim 1, further comprising the 
steps of: 

receiving said request for said secure Web page, said secure Web page further 
including dynamically-changing data; 

determining whether said static data has been pre-encrypted; 

bypassing an encryption step and transmitting said static data in response to a 
determination that said static data has been pre-encrypted; 

encrypting said dynamically-changing data; and 

transmitting said encrypted, dynamically-changing data. 

7. (Canceled) 
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8. (Original) The method according to claim 1, further comprising the step of 
maintaining said Web page by a secure Web site. 

9. (Currently amended) A computer program product in a data processing system, 
comprising: 

instruction means for receiving a request from a client for a secure Web page at a 
server, said secure Web page including static data; 

instruction means for establishing a secure session between said client and said 
server in response to said client transmitting said request; 

instruction means for associating a cache with said secure session; 

instruction means for determining whether a pre-encrypted version of said static 
data has been stored in said cache in response to said receipt of said request; and 

instruction means for in response to a determination that said pre-encrypted 
version of said static data has been stored in said cache, transmitting said pre-encrypted version 
of said static data ; 

instruction means for receiving a request for static data included within said Web 

page; 

instruction means for checking the cache to determine whether the pre-encrypted 
version of said static data is already stored in said cache; 
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instruction means for in response to a determination that said pre-encrypted 
version is stored in said cache, bypassing the encryption step and transmitting said pre-encrypted 
version of the static data; and 

instruction means for in response to a determination that said pre-encrypted 
version is not stored in said cache, encrypting said static data and transmitting said encrypted 
static data. 

1 0. (Currently amended) The product according to claim 9, further comprising 
instruction means for in response to a determination that said static data has not been pre- 
encrypted, encrypting said data and transmitting said encrypted static data. 

1 1 . (Currently amended) The product according to claim 10, further comprising 
instruction means for in response to a determination that said static data has not been pre- 
encrypted, storing said encrypted static data. 

1 2. (Currently amended) The product according to claim 1 1 , further comprising 
instruction means for storing said encrypted static data in the cache. 

13. (Currently amended) The product according to claim 9, further comprising: 
instruction means for receiving a request for an image included within said Web 



page; 
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instruction means for checking the cache to determine whether the pre-encrypted 
version of said image is already stored in said cache; 

instruction means for in response to a determination that said pre-encrypted 
version of said image is stored in said cache, bypassing the encryption step and transmitting said 
pre-encrypted version of the image; and 

instruction means for in response to a determination that said pre-encrypted 
version of said image is not stored in said cache, encrypting said image and transmitting said 
encrypted image. 

14. (Original) The product according to claim 9, further comprising: 

instruction means for receiving said request for said secure Web page, said secure 
Web page ftirther including dynamically-changing data; 

instruction means for determining whether said static data has been pre-encrypted; 

instruction means for bypassing an encryption step and transmitting said static 
data in response to a determination that said static data has been pre-encrypted; 

instruction means for encrypting said dynamically-changing data; and 

instruction means for transmitting said encrypted, dynamically-changing data. 

15. (Canceled) 

16. (Original) The product according to claim 9, further comprising instruction 
means for maintaining said Web page by a secure Web site. 
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1 7. (Currently amended) A data processing system, comprising: 

a request from a client being received by a server for a secure Web page , said 

secure Web page including static data; 

a secure session being established between said client and said server in response 

to said client transmitting said request; 

a cache associated with said secure session; 

a CPU executing code for determining whether a pre-encrypted version of said 
static data has been stored in said cache in response to said receipt of said request; and 

in response to a determination that said pre-encrypted version of said static data 
has been stored in said cache, said CPU executing code for transmitting said pre-encrypted 
version of said static data ; 

said CPU receiving a request for static data included within said Web page; 

said CPU checking the cache to determine whether the pre-encrypted version of 
said static data is already stored in said cache; 

in response to a determination that said pre-encrypted version is stored in said 
cache, said CPU bypassing the encryption step and transmitting said pre-encrypted version of the 
static data; and 

in response to a determination that said pre-encrypted version is not stored in said 
cache, said CPU encrypting said static data and transmitting said encrypted static data. 
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18. (Currently amended) The system according to claim 1 7, further comprising in 
response to a determination that said static data has not been pre-encrypted, said CPU executing 
code for encrypting said static data and transmitting said encrypted static data. 

19. (Currently amended) The system according to claim 18, further comprising in 
response to a determination that said static data has not been pre-encrypted, said CPU executing 
code for storing said encrypted static data. 

20. (Currently amended) The system according to claim 19, further comprising the 
cache for storing said encrypted static data. 

21. (Currently amended) The system according to claim 17, further comprising: 
said Web page including a request for an image included within said Web page; 
said CPU executing code for checking the cache to determine whether the pre- 
encrypted version of said image is already stored in said cache; 

in response to a determination that said pre-encrypted version of said image is 
stored in said cache, said CPU executing code for bypassing the encryption step and transmitting 
said pre-encrypted version of the image; and 

in response to a determination that said pre-encrypted version of said image is not 
stored in said cache, said CPU executing code for encrypting said image and transmitting said 
encrypted image. 
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22. (Original) The system according to claim 17, further comprising: 
said secure Web page farther including dynamically-changing data; 

said CPU executing code for determining whether said static data has been pre- 

encrypted; 

said CPU executing code for bypassing an encryption step and transmitting said 
static data in response to a determination that said static data has been pre-encrypted; 

said CPU executing code for encrypting said dynamically-changing data; and 
said CPU executing code for transmitting said encrypted, dynamically-changing 

data. 

23. (Canceled) 

24. (Original) The system according to claim 17, further comprising said Web page 
being maintained by a secure Web site. 



Examiner's Comment 

In regards to the allowance of these claims, the Examiner has interpreted the term "static data" to 
refer to information that does not frequently change on a website such as a company logo as 
detailed by the specification. To this effect, the Applicant has recited on (page 3). 
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Many Web pages include various marketing information and logos that are not unique to 
any particidar page, are not security sensitive, and do not change frequently. For example 
company logo images do not often change. 

The known systems described above encrypt the non-sensitive and static data along with 
the security sensitive data each time the information is transmitted to a client. This is 
unnecessary and can be very time-consuming. 

Therefore, a need exists for a method, system, and product whereby a secure Web site 
stored pre-encrypted static information. The Web site then encrypts dynamically-changing 
information in response to each request, and bypasses the encryption step for the static 
information that has been pre-encrypted. 

The Examiner previously stated in a telephonic communication with Applicant's representative, 
it is understood that the "preencryption" and storing of data frequently occurs with digital 
certificates. Digital certificates are by definition digitally signed or "encrypted." The storing of 
digital certificates into a cache is well known in the art. For this reason, the Examiner has 
required the claims be amended from reciting "data" into "static data", the nature of which is 
described in the specification, displayed above. Furthermore, information such as that which is 
typically placed into forms, is by it's very nature dynamic data because it requires the user to 
enter in information, allowing the information to change from user to user or even session to 
session. 

The Examiner also notes that while it is true that all data must be necessarily "static", that 
is, unchanging, for at least some period of time (a digital certificate may be static for the period 
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of time allotted before the expiration of it's term, dynamic data may be static for periods of 
minutes or hours), the term "static data" inteipreted in light of the specification offers 
sufficiently clear disclosure as to how this term is to be interpreted. (Information such as 
corporate logos that do not change frequently.) 

Conclusion 

3. Any inquiry concerning this communication from the examiner should be directed to 
Thomas M Ho whose telephone number is (571)272-3835. The examiner can normally be 
reached on M-F from 9:30 AM - 6:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Gregory A. Morse can be reached on (571)272-3838. 

The Examiner may also be reached through email through Thomas.Ho6(%uspto,gov 

Any inquiry of a general nature or relating to the status of this application or proceeding should 

be directed to the receptionist whose telephone number is (571)272-2100. 

Genera) information/Receptionist Telephone: 571-272-2100 Fax: 703-872-9306 
Customer Service Representative Telephone: 571-272-2100 Fax: 703-872-9306 



TMH. 



June 13th, 2005 
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